Gearbox V2
ChainSecurity reviewed Gearbox (Gearbox V2) on 8 Nov 2022: 27 findings, 0 critical; 25 marked fixed, 1 acknowledged, 1 open.
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings27
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 3 |
| Low | 1 | 1 | 22 |
MediumMulticall Actions During PausesFixed
The report gives no description here.
MediumPricefeed of Oracle May Be UpdatedFixed
The report gives no description here.
MediumUnable to Handle Missing Return ValueFixed
The report gives no description here.
LowAdapters Ignore User InputFixed
The report gives no description here.
LowAdd Token Without Liquidation ThresholdFixed
The report gives no description here.
LowChecking for Valid Token Indices for Curve Pools Is Too LooseFixed
The report gives no description here.
LowCredit Accounts Give Very High Approval to ContractFixed
The report gives no description here.
LowCreditAccount Calls approve() on Unsupported TokenFixed
The report gives no description here.
LowCumulativeDrop Calculation RoundingFixed
The report gives no description here.
LowCurve RegistryFixed
The report gives no description here.
Show 10 more
LowCurveV1 Adapters: TokenOut Might Not Be Enabled at CreditAccountFixed
The report gives no description here.
LowDuplicate Error Code UsedFixed
The report gives no description here.
LowFree Flashloan upon Open/CloseFixed
The report gives no description here.
LowIncorrect Comment After RefactoringFixed
The report gives no description here.
LowIncorrect DescriptionsFixed
The report gives no description here.
LowOutdated Function DescriptionFixed
The report gives no description here.
LowPriceOracle: Unused TimestampFixed
The report gives no description here.
LowRead-only ReentrancyFixed
The report gives no description here.
LowRedundant Event EmissionFixed
The report gives no description here.
LowRedundant InitializationFixed
The report gives no description here.
Show 5 more
LowReentrancy Into CreditFacadeFixed
The report gives no description here.
LowSanity Check of New PricefeedFixed
The report gives no description here.
LowtwvUSD Contains Value in UnderlyingFixed
The report gives no description here.
LowUnused allowedContractsSetFixed
The report gives no description here.
LowYearnV2Adapter: Different Behavior of FunctionsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
- adapters/AbstractAdapter.sol
- adapters/curve/* excluding CurveV1_DepositZap.sol
Part of Gearbox’s security record
GearboxSecurity firm
ChainSecurity81 projects reviewed · 286 reports · latest Sep 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us